Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa
File: 34352e3137362e38332e302f32342d3234203d3e20323639303131.roa (raw, json)
Hash identifier: fyd8CMf7ZdcnZBSrhXYNY7Vb1t/0L8jZBwoRiNFCaVs=
Subject key identifier: CB:32:E4:91:49:49:F6:FA:3C:1D:7C:3B:C1:CF:F0:09:09:14:6B:57
Certificate issuer: /CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Certificate serial: 32E10A1D494085BC954129BC42601EA6EFE09296
Authority key identifier: 71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa
Signing time: Mon 07 Jul 2025 20:36:37 +0000
ROA not before: Mon 07 Jul 2025 20:31:37 +0000
ROA not after: Mon 06 Jul 2026 20:36:37 +0000
asID: 269011
IP address blocks: 45.176.83.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:0a:1d:49:40:85:bc:95:41:29:bc:42:60:1e:a6:ef:e0:92:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Validity
Not Before: Jul 7 20:31:37 2025 GMT
Not After : Jul 6 20:36:37 2026 GMT
Subject: CN=CB32E4914949F6FA3C1D7C3BC1CFF00909146B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:57:40:2c:61:b9:d1:c8:03:34:cb:1c:eb:
63:46:28:d5:22:aa:71:93:b1:89:00:0e:14:6e:ff:
ce:9e:b8:ce:b8:ea:31:71:38:96:d8:60:27:a1:5c:
f6:dd:d0:12:72:8f:84:b9:1f:88:b8:f6:74:9c:21:
3a:39:93:09:a7:a6:0b:c5:b1:c0:d4:6a:2f:ef:25:
bd:cc:31:05:f6:61:72:83:07:ca:16:5e:0f:34:fd:
b1:44:0c:da:00:bf:01:e4:44:b2:b0:3c:17:ed:a7:
30:fb:6a:e3:e3:4e:c2:0f:61:62:8a:bd:5c:db:61:
d9:fb:02:6a:30:b0:69:11:a7:59:1b:f8:df:a7:de:
1f:40:3b:be:5a:ab:27:29:18:2b:73:48:26:8a:4a:
19:d1:90:64:eb:1a:8d:da:e9:19:a2:17:64:9b:e6:
ba:39:cd:cc:b7:a1:90:b8:a3:f6:b6:7f:b5:0a:f7:
98:cf:b9:5c:ee:f0:ac:d1:91:d4:95:0d:a8:69:f3:
da:49:31:6e:d4:49:bc:1f:47:c7:71:9e:ff:8b:10:
c2:d0:3f:e0:43:a5:95:54:54:31:91:38:82:61:ce:
ff:0b:b9:f4:74:da:b0:67:82:a3:42:35:44:f2:27:
d9:07:77:41:c1:1f:06:e0:69:3d:cf:59:ac:0b:d8:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:E4:91:49:49:F6:FA:3C:1D:7C:3B:C1:CF:F0:09:09:14:6B:57
X509v3 Authority Key Identifier:
keyid:71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3f:71:ea:a2:4e:63:56:4b:41:79:9b:93:3a:10:9d:48:56:
d9:07:2b:97:5d:37:b6:6d:8a:54:f9:61:cd:b0:05:42:7b:4a:
a0:41:46:18:c2:57:f9:d0:93:34:01:53:c7:b8:12:23:d0:b4:
ec:ee:96:bc:f1:8e:0f:65:33:ce:13:bb:d3:22:cb:f7:30:7a:
9c:b5:8e:97:ff:17:8c:53:d0:aa:49:48:cc:0a:16:6c:05:fc:
0c:4f:af:c5:7b:2e:06:ab:1c:3f:87:7e:d3:8a:7c:12:7c:96:
67:4f:50:7f:73:95:22:b2:93:78:82:08:70:3a:fe:6f:6d:bd:
3a:97:c6:63:09:5b:87:38:4a:b3:46:e4:32:6b:cc:5e:20:77:
47:f8:d4:6b:e7:ee:8e:00:7b:37:54:66:b2:0c:66:27:21:00:
05:d8:aa:a4:28:12:a1:3d:6c:91:21:87:e3:f6:da:d8:28:a0:
e9:cc:dc:ed:db:ef:24:24:88:b6:a8:4a:c4:7b:f4:8e:51:57:
49:07:4c:c5:57:48:5b:ff:7e:ed:8f:5a:34:1d:64:6e:4b:59:
49:58:b3:d0:79:a8:80:5c:69:30:61:05:48:2f:06:6c:91:86:
a1:6c:7c:76:c4:8b:df:15:f5:89:de:e0:9c:60:72:56:a3:2e:
8f:0a:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:55:10 2025 by rpki-client